src/RedshiftAutomation/deploy-function-and-schedule.yaml [75:104]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            - "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
        AssumeRolePolicyDocument:
          Version: "2012-10-17"
          Statement:
            -
              Sid: "AllowLambdaServiceToAssumeRole"
              Effect: "Allow"
              Action:
                - "sts:AssumeRole"
              Principal:
                Service:
                  - "lambda.amazonaws.com"
        Policies:
          -
            PolicyName: "LambdaRedshiftRunnerPolicy"
            PolicyDocument:
              Version: "2012-10-17"
              Statement:
                -
                  Effect: "Allow"
                  Action:
                    - "s3:GetObject"
                    - "cloudwatch:PutMetricData"
                    - "redshift:ModifyClusterParameterGroup"
                  Resource: "*"
                -
                  Effect: "Allow"
                  Action:                
                    - "kms:Decrypt"
                  Resource: !Ref KmsKeyARN
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



src/SystemTablePersistence/deploy-systable-standalone.yaml [79:108]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
            - "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole"
        AssumeRolePolicyDocument:
          Version: "2012-10-17"
          Statement:
            -
              Sid: "AllowLambdaServiceToAssumeRole"
              Effect: "Allow"
              Action:
                - "sts:AssumeRole"
              Principal:
                Service:
                  - "lambda.amazonaws.com"
        Policies:
          -
            PolicyName: "LambdaRedshiftRunnerPolicy"
            PolicyDocument:
              Version: "2012-10-17"
              Statement:
                -
                  Effect: "Allow"
                  Action:
                    - "s3:GetObject"
                    - "cloudwatch:PutMetricData"
                    - "redshift:ModifyClusterParameterGroup"
                  Resource: "*"
                -
                  Effect: "Allow"
                  Action:                
                    - "kms:Decrypt"
                  Resource: !Ref KmsKeyARN
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



